Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/6997ce-2898-4530-a40c-2f1bfbc7f0f3/1/EDWtT69cNx08JO1z-tZs3GrGuRg.mft
File:                     EDWtT69cNx08JO1z-tZs3GrGuRg.mft (raw, json)
Hash identifier:          9QA4snoK6LthJBnd0mzNz0GFq2xlLQlhSD0ZlwVtjXk=
Subject key identifier:   17:09:95:26:01:C0:49:D9:4B:16:E7:5C:2A:DC:F3:C3:A2:2D:77:06
Authority key identifier: 10:35:AD:4F:AF:5C:37:1D:3C:24:ED:73:FA:D6:6C:DC:6A:C6:B9:18
Certificate issuer:       /CN=1035ad4faf5c371d3c24ed73fad66cdc6ac6b918
Certificate serial:       01967E33F388C3CDEB3FF5852F229A4378EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EDWtT69cNx08JO1z-tZs3GrGuRg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/6997ce-2898-4530-a40c-2f1bfbc7f0f3/1/EDWtT69cNx08JO1z-tZs3GrGuRg.mft
Manifest number:          057C
Signing time:             Mon 28 Apr 2025 21:00:56 +0000
Manifest this update:     Mon 28 Apr 2025 21:00:56 +0000
Manifest next update:     Tue 29 Apr 2025 21:00:56 +0000
Files and hashes:         1: EDWtT69cNx08JO1z-tZs3GrGuRg.crl (hash: TGh5AsKmSi9afTHFRcxeASs5SEqI03S+e69t78hIAbc=)
                          2: qv58PcziHSozk6pOK4h_LgXLS7w.roa (hash: BZchB3z4vvljLfndUGS0R7LquQNr6/obSV/f0pocufU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/6997ce-2898-4530-a40c-2f1bfbc7f0f3/1/EDWtT69cNx08JO1z-tZs3GrGuRg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/6997ce-2898-4530-a40c-2f1bfbc7f0f3/1/EDWtT69cNx08JO1z-tZs3GrGuRg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EDWtT69cNx08JO1z-tZs3GrGuRg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 15:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7e:33:f3:88:c3:cd:eb:3f:f5:85:2f:22:9a:43:78:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1035ad4faf5c371d3c24ed73fad66cdc6ac6b918
        Validity
            Not Before: Apr 28 21:00:56 2025 GMT
            Not After : Apr 29 21:00:56 2025 GMT
        Subject: CN=1709952601c049d94b16e75c2adcf3c3a22d7706
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:98:ee:11:be:48:60:c5:35:66:b7:43:cb:11:
                    9b:16:63:b5:28:c0:a1:62:3a:52:e6:ec:00:63:e9:
                    20:ce:ef:d2:d1:33:92:db:91:31:fc:bf:e3:1a:d2:
                    8f:f8:cf:fb:01:b3:f8:43:c0:9b:ca:bc:66:52:68:
                    9e:b8:93:ec:5a:bf:ba:9f:77:78:5b:e1:b2:e4:b2:
                    af:b3:9c:d1:50:2c:e1:b0:76:4d:d2:47:90:9d:31:
                    f7:b8:f2:af:63:d4:41:0a:ac:3c:99:50:b3:7e:a9:
                    d1:08:05:52:6a:00:ea:bf:9f:bc:a7:8b:3a:61:a7:
                    ae:3d:9b:95:04:aa:81:8a:c6:04:f5:14:ec:b5:0b:
                    b6:38:bc:74:b7:7f:59:a3:9d:48:d5:2c:ee:55:fd:
                    d4:07:38:cd:e2:51:8e:3e:c3:4c:0f:81:f4:ed:59:
                    8f:b1:93:c6:35:cc:d6:15:08:e7:bd:41:56:76:d3:
                    08:0f:58:79:fc:ba:d1:71:c0:3e:ef:3b:43:0b:81:
                    c2:15:f1:35:7b:2c:f8:cf:56:74:b0:18:af:22:39:
                    7a:f9:6f:b5:bd:b2:0c:22:98:6b:2c:f8:10:90:f7:
                    2e:7d:11:9f:b2:eb:49:5c:2a:6c:ad:28:97:20:1f:
                    c6:9e:b8:3c:61:9a:9c:17:c0:13:27:81:1f:21:65:
                    11:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:09:95:26:01:C0:49:D9:4B:16:E7:5C:2A:DC:F3:C3:A2:2D:77:06
            X509v3 Authority Key Identifier:
                keyid:10:35:AD:4F:AF:5C:37:1D:3C:24:ED:73:FA:D6:6C:DC:6A:C6:B9:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EDWtT69cNx08JO1z-tZs3GrGuRg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/6997ce-2898-4530-a40c-2f1bfbc7f0f3/1/EDWtT69cNx08JO1z-tZs3GrGuRg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/6997ce-2898-4530-a40c-2f1bfbc7f0f3/1/EDWtT69cNx08JO1z-tZs3GrGuRg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:a4:a6:a7:6a:b7:00:66:78:4a:90:ab:50:df:56:4a:ea:62:
         4e:96:cc:e0:97:d7:66:d1:f6:f5:6e:d0:15:13:a9:49:0b:16:
         da:21:46:26:a2:5a:fa:84:8b:06:e3:3f:26:46:e7:15:e4:b5:
         f3:89:46:f3:1b:28:e1:30:75:89:d1:e5:5a:84:68:ea:3a:95:
         16:10:89:b1:65:f7:33:97:5f:ac:3d:a6:c8:75:ac:95:c4:1c:
         e5:ba:be:01:14:f4:5c:11:dd:07:78:51:d7:32:37:f6:40:f8:
         d9:37:00:c5:c3:f6:f8:98:dd:8a:b3:6f:49:98:62:17:d6:54:
         4e:d6:dc:ff:66:cd:b4:be:68:62:9d:86:99:bd:2b:67:db:9f:
         5e:3b:9c:0a:d4:79:b8:49:d8:e0:5f:6b:93:1e:d7:0b:02:4d:
         ee:11:13:3e:59:7b:fd:71:71:97:49:b4:a3:30:be:2c:b9:14:
         e8:76:68:a9:d8:a7:40:2f:f6:ac:27:1b:6f:85:0e:de:c8:9c:
         1d:5b:f9:66:06:79:80:2a:70:b9:f1:6d:7d:af:34:b9:85:3c:
         d3:5a:ae:f6:d7:26:ce:ac:d2:0b:9c:6e:9c:92:67:69:08:bb:
         7c:dc:b5:8a:0b:9a:2e:fa:10:de:88:a3:a2:44:45:3d:7d:b0:
         c6:49:e0:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:40:05 2025 by rpki-client